Red Hat Bugzilla – Bug 466014
gst-install-plugin-helper needs execstack, SELinux denials
Last modified: 2008-10-29 10:43:46 EDT
Description of problem: SELinux is preventing gst-install-plu from making the program stack executable. type=SYSCALL msg=audit(1223402720.159:31): arch=c000003e syscall=10 success=yes exit=0 a0=7fff528ba000 a1=1000 a2=1000007 a3=3370a20000 items=0 ppid=3587 pid=3588 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts2 ses=1 comm="gst-install-plu" exe="/usr/libexec/pk-gstreamer-install" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1223402741.218:32): avc: denied { execstack } for pid=3625 comm="totem" scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process Version-Release number of selected component (if applicable): SELinux is preventing gst-install-plu from making the program stack executable. Steps to reproduce: run totem to play an MP3 file with no MP3 codecs installed, and selinux enforcing.
I'm not sure why pk-codec-installer needs execstack -- it's a simple C program calling a DBUS method... I'll try doing this with enforcing on tomorrow.
Probably it loads some gstreamer plugins that need execstack ?
I really can't reprodude -- Matt -- what plugins do you have installed and what is the file format of the file that triggered the PackageKit dialog? Thanks.
Can you please provide: rpm -qa | grep gstreamer Thanks.
Turns out I did have streamer plugins (old ones) instealled in ~/.gstreamer-0.10/plugins/. Removed those, no AVCs. Downloaded latest MP3 plugin from Fluendo's web site, and it works now with no AVCs. So an upgrade of the plugins is recommended. I suspect the release notes should mention to upgrade any previously installed Fluendo MP3 codecs if you run into this problem. Adding release notes flag.
*** Bug 468416 has been marked as a duplicate of this bug. ***
https://fedoraproject.org/wiki/Docs/Beats/Multimedia now includes text for this.